Lucene search
GoogleOSV:CVE-2020-14189HistoryNov 09, 2020 - 10:15 p.m.
CVE-2020-14189
2020-11-0922:15:12
Google
osv.dev
4
The execute function in in the Atlassian gajira-comment GitHub Action before version 2.0.2 allows remote attackers to execute arbitrary code in the context of a GitHub runner by creating a specially crafted GitHub issue comment.
| CPE | Name | Operator | Version |
|---|---|---|---|
| gajira-comment | eq | 1.0.3 | |
| gajira-comment | eq | 2.0.0 | |
| gajira-comment | eq | 1.0.1 | |
| gajira-comment | eq | 1.0.0 | |
| gajira-comment | eq | 2.0.1 |
Related
cvelist
cvelist
CVE-2020-14189
2020-10-28 00:00:00
cve
cve
CVE-2020-14189
2020-11-09 22:15:12
nvd
nvd
CVE-2020-14189
2020-11-09 22:15:12
prion
prion
Code injection
2020-11-09 22:15:00